Learn intrusion detection: Using Zeek and Elastic for incident response

•Download as PPTX, PDF•

0 likes•375 views

Intrusion detection is a foundational skill for many cybersecurity careers. Learn how intrusion detection works in action in this live webcast. Then take these free intrusion detection system (IDS) tools and start building your skills. Join Infosec Skills author Mark Viglione on March 8 at 11 a.m. CST to learn all about: What is intrusion detection? How intrusion detection fits into different career paths Live demo of Zeek for log analysis Live demo of Elastic SIEM for incident response Plus your live intrusion detection and career questions

Technology

Meet the
panel
Infosec Skills author &
Founder of Enigma Networkz
Jeff Peters
Director of Content Marketing
Infosec
Mark Viglione

Today’s
webcast
⮚ Intrusion detection overview
⮚ MITRE ATT&CK and intrusion detection
⮚ Intrusion detection demo
⮚ Use case
⮚ Tools
⮚ Zeek demo
⮚ Elastic demo
⮚ Q&A

More cybersecurity training resources
Learn intrusion detection with Mark Viglione
⮚ Advanced Intrusion Detection learning path
⮚ Read Mark’s intrusion detection blogs
Free resources from Infosec
⮚ Create your free Infosec Skills account
⮚ Infosec Skills Monthly Challenge
⮚ Infosec YouTube channel
⮚ Infosec Accelerate Scholarship

Intrusion detection overview
Intrusion detection is a way to
detect if any unauthorized activity
is occurring on your network or any
of your endpoints/systems.
Jobs that require IDS
knowledge and skills:
⮚ SOC analyst
⮚ Cybersecurity analyst
⮚ Cyber threat hunter
⮚ Network security
engineer
⮚ Systems engineer
⮚ Penetration tester

Intrusion detection overview: 3 types
Signature-based detection
involves detecting
previously known
vulnerabilities and attacks
Rule-based detection
uses a set of rules to
determine whether an
activity is suspicious
Anomaly detection
uses methods like
machine learning to
detect previously
unknown threats

Intrusion detection demo: Use case and tools
Intrusion detection example
⮚ Generating Zeek logs from Brim
⮚ Uploading to Elastic, an open-
source security information and
event management (SIEM) tool
⮚ Exploring the data, walking
through a dashboard and
setting up detections
Demo

Intrusion detection: What’s next?
Visibility is crucial for blue teams and network
defenders. You set up the rule. Now what?
⮚ Tuning: Huge part of building valuable detections
⮚ Alert fatigue: Prioritizing alerts/detections
⮚ Choice of tools: Many different tools, how to
choose?

15 scholarships. 5 categories. $225,000+ value.

Learn cybersecurity with Infosec Skills
Infosec Skills subscription:
➢ 190+ role-based learning paths (e.g., Ethical Hacking,
Digital Forensics, Advanced Intrusion Detection)
➢ 100s of hands-on labs in cloud-hosted cyber ranges
➢ Custom certification practice exams and skill
assessments aligned to key cybersecurity roles
Infosec Skills live boot camp:
➢ Live, instructor-led training (in-person or live online)
➢ Free annual Infosec Skills subscription
➢ 1-year extended access to all boot camp video replays
and materials
➢ Exam voucher and Exam Pass Guarantee
infosecinstitute.com/skills

Free year of Infosec Skills
And the winner for a
one-year subscription to
Infosec Skills is …
infosecinstitute.com/skills
(Valued at $599)

About us
Infosec believes knowledge is power when fighting
cybercrime. We help IT and security professionals advance
their careers with skills development and certifications
while empowering all employees with security awareness
and privacy training to stay cyber-safe at work and home.
www.infosecinstitute.com

Ever wonder what threat hunting is all about? Join Infosec Principal Security Researcher Keatron Evans as he breaks down the basics of what it’s like to have a career hunting down potential cyber threats. Join us on for an inside look at a day in the life of a threat hunter, including: Why threat hunters are more critical today than ever before Knowledge and skills needed to drive threat hunting success Live demos of essential threat hunting skills and tools used to detect and mitigate adversarial behavior One lucky attendee will win a free year of Infosec Skills. Complete the form to save your seat! P.S. Want to go even deeper into threat hunting? Don’t miss our advanced threat hunting session on June 28, Join the hunt: Threat hunting for proactive cyber defense.

Malware detection-using-machine-learning

Security Bootcamp

E-mail Investigation

edwardbel

Penetration Testing Basics

Rick Wanner

Malware Analysis

Ramin Farajpour Cami

Cyber Threat Intelligence

mohamed nasri

Red Team vs. Blue Team

EC-Council

EC-Council, a globally recognized cybersecurity credentialing body, offers the Certified Ethical Hacker (CEH) and Certified Penetration Testing Professional (CPENT) certifications to help you acquire the skills you need to be a part of Red and Blue Teams. CEH is the most desired cybersecurity training program, upping your ethical hacking skills to the next level. CPENT takes off from where CEH leaves off, giving you a real-world, hands-on penetration testing experience.

Threat Intelligence

Deepak Kumar (D3)

As threat hunters, you already know staying ahead of the adversary demands a proactive approach to threat detection and response. Don your virtual threat hunting gear and join Infosec Principal Security Researcher Keatron Evans as he goes sleuthing for cyber threats. Join us for practical threat hunting insights and career recommendations, including: Threat hunting knowledge and skills to accelerate your career How to help clients navigate the threat hunting toolbox and prioritize technology investments Live demos of notoriously hard-to-detect adversarial behavior like memory-only malware and living-off-the-land techniques One lucky attendee will win a free year of Infosec Skills. Complete the form to save your seat! P.S. Don’t miss our novice-level threat hunting session: Threat hunting foundations: People, process and technology.

Red Team Framework

👀 Joe Gray

Presented at the DEFCON27 Red Team Offensive Village on 8/10/19. From the dawn of technology, adversaries have been present. They have ranged from criminal actors and curious children to - more modernly - nation states and organized crime. As an industry, we started to see value in emulating bad actors and thus the penetration test was born. As time passes, these engagements become less about assessing the true security of the target organization and more about emulating other penetration testers. Furthermore, these tests have evolved into a compliance staple that results in little improvement and increasingly worse emulation of bad actors. In this presentation, we will provide a framework complementary to the Penetration Testing Execution Standard (PTES). This complementary work, the Red Team Framework (RTF), focuses on the objectives and scoping of adversarial emulation with increased focus on the perspective of the business, their threat models, and business models. The RTF borrows part of the PTES, adding emphasis on detection capabilities as well as purple team engagements. We believe this approach will better assist organizations and their defensive assets in understanding threats and building relevant detections.

Vulnerability Management

asherad

CHFI v10

SagarNegi10

Cyber Security Incident Response

PECB

BSidesLV 2018 - Katie Nickels and John Wunder - ATT&CKing the Status Quo

Katie Nickels

Indian perspective of cyber security

Aurobindo Nayak

Ethical Hacking n VAPT presentation by Suvrat jain

Suvrat Jain

Soc analyst course content v3

ShivamSharma909

The SOC analyst training program is meticulously designed by the subject matter experts at Infosec Train. The training program offers a deep insight into the SOC operations and workflows. It is an excellent opportunity for aspiring and current SOC analysts (L1/L2/L3) to level up their skills to mitigate business risks by effectively handling and responding to security threats. https://www.infosectrain.com/courses/soc-analyst-expert-training/

Computer forensics pptNikhil Mashruwala

Zero Trust Model Presentation

Gowdhaman Jothilingam

Hacking pptgiridhar_sadasivuni

Evolution of Offensive Testing - ATT&CK-based Adversary Emulation Plans

Christopher Korban

Penetration Testing Tutorial | Penetration Testing Tools | Cyber Security Tra...

Edureka!

( ** Cyber Security Training: https://www.edureka.co/cybersecurity-certification-training ** ) This Edureka PPT on "Penetration Testing" will help you understand all about penetration testing, its methodologies, and tools. Below is the list of topics covered in this session: What is Penetration Testing? Phases of Penetration Testing Penetration Testing Types Penetration Testing Tools How to perform Penetration Testing on Kali Linux? Cyber Security Playlist: https://bit.ly/2N2jlNN Cyber Security Blog Series: https://bit.ly/2AuULkP Instagram: https://www.instagram.com/edureka_lea... Facebook: https://www.facebook.com/edurekaIN/ Twitter: https://twitter.com/edurekain LinkedIn: https://www.linkedin.com/company/edureka

Security operation center (SOC)

Ahmed Ayman

Computer forensics

deaneal

Get started in cybersecurity in 2022

Infosec

How to do application security right

Infosec

It’s been more than a decade since Marc Andreessen popularized the idea that “every company needs to become a software company.” But in 2022, just being a software company isn’t enough; you need to become a secure software company. That’s why Ted Harrington created a new Infosec Skills learning path based on his best-selling book, “Hackable: How to Do Application Security Right.” Whether you create code, secure systems or manage organizational risk, understanding application security has become a must-have skill. Join us to learn how to: Avoid common application security mistakes Implement best practices to secure software systems Create the business case for security as a competitive edge Plus, get your live questions answered by Ted Every registrant will get a free copy of Ted’s new ebook, “How to secure your software faster and better.”

What's hot

Dragos S4x20: How to Build an OT Security Operations Center

Dragos, Inc.

Threat Intelligence 101 - Steve Lodin - SubmittedSteve Lodin

CompTIA CASP+ | Everything you need to know about the new exam

Infosec

Threat hunting in cyber world

Akash Sarode

Join the hunt: Threat hunting for proactive cyber defense.pptx

Infosec

Red Team Framework

👀 Joe Gray

Vulnerability Management

asherad

CHFI v10

SagarNegi10

Cyber Security Incident Response

PECB

BSidesLV 2018 - Katie Nickels and John Wunder - ATT&CKing the Status Quo

Katie Nickels

Indian perspective of cyber security

Aurobindo Nayak

Ethical Hacking n VAPT presentation by Suvrat jain

Suvrat Jain

Soc analyst course content v3

ShivamSharma909

Computer forensics pptNikhil Mashruwala

Zero Trust Model Presentation

Gowdhaman Jothilingam

Hacking pptgiridhar_sadasivuni

Evolution of Offensive Testing - ATT&CK-based Adversary Emulation Plans

Christopher Korban

Penetration Testing Tutorial | Penetration Testing Tools | Cyber Security Tra...

Edureka!

Security operation center (SOC)

Ahmed Ayman

Computer forensics

deaneal

What's hot (20)

Dragos S4x20: How to Build an OT Security Operations Center

Threat Intelligence 101 - Steve Lodin - Submitted

CompTIA CASP+ | Everything you need to know about the new exam

Threat hunting in cyber world

Join the hunt: Threat hunting for proactive cyber defense.pptx

Red Team Framework

Vulnerability Management

CHFI v10

Cyber Security Incident Response

BSidesLV 2018 - Katie Nickels and John Wunder - ATT&CKing the Status Quo

Indian perspective of cyber security

Ethical Hacking n VAPT presentation by Suvrat jain

Soc analyst course content v3

Computer forensics ppt

Zero Trust Model Presentation

Hacking ppt

Evolution of Offensive Testing - ATT&CK-based Adversary Emulation Plans

Penetration Testing Tutorial | Penetration Testing Tools | Cyber Security Tra...

Security operation center (SOC)

Computer forensics

Similar to Learn intrusion detection: Using Zeek and Elastic for incident response

Get started in cybersecurity in 2022

Infosec

How to do application security right

Infosec

Getting started in digital forensics

Infosec

Digital forensics is the backbone of investigating cybercrime. It includes identifying, preserving, extracting, analyzing and reporting evidence across computers, mobile devices and networks. Join Keatron Evans, Infosec instructor and Managing Partner at KM Cyber Security, in this on-demand webinar as we discuss: - The difference between computer, mobile and network forensics - How a forensics certification can progress your career - A live cloud forensics demonstration voted on by attendees - Digital forensics questions from live attendees You can watch the full webinar, including the live cloud forensics demo, here: https://www2.infosecinstitute.com/l/12882/2019-03-12/chf2dr

Understanding Penetration Testing & its Benefits for Organization

PECB

This topic will cover the most important part related the penetration testing and the importance of its implementation on the organization. Considering it as a good tool for companies to deal with information security vulnerabilities, it is becoming significant part for companies to develop it. Main point that will be covered: • Overview of Penetration Testing • Purpose of Penetration testing and benefits • What are the Rules of Engagement (White, Black and Grey Box Testing) • Penetration Testing and Phases Presenter: Christie Oso is Managing Principal Information Security consultant and trainer at Intex IT. She is also responsible for Risk Management, Vulnerability Assessment, and Penetration Testing. She holds certification on CISSP, CISM, CEH, ISO 27001 LA, ISO 27005 Risk Manager, Link of the recorded session published on YouTube: https://youtu.be/lyqOJmC94vg

2019 FRSecure CISSP Mentor Program: Class Ten

FRSecure

Intro to INFOSEC

Sean Whalen

edCeh brochure

Knowledgehut

Security is a serious issue in the IT industry across the globe, especially with the IT market booming despite the prevailing economic uncertainties. While following best practices and security policies are very important, they cannot guarantee that your data safety will not be compromised. Ethical hacking and countermeasures serve to test and evaluate the security of the corporate environment in the real world, using real-world hacking tools and methodologies.

Karthik raja r task 7 i

karthikraja90173

Ecsa LPT V8 brochureADEPT TECHNOLOGY

Information Security Analyst- Infosec train

InfosecTrain

Certied Ethical Hacker

Knowledgehut

Activity1 c1

FORMAEMPLEO

It security cognic_systems

Cognic Systems Pvt Ltd

FRSecure 2018 CISSP Mentor Program Session 10

FRSecure

All About Cyber Security Orientation Program (Foundational Level).pptx

Infosectrain3

Cloud Security Issues and Challenge.pptx

Infosectrain3

All About Cyber Security Orientation Program (Foundational Level).pptx

infosec train

Ecsa Course

keerthana p

Top 20 certified ethical hacker interview questions and answer

ShivamSharma909

The technique of discovering vulnerabilities in a software, website, or agency’s structure that a hacker might exploit is known as ethical hacking. They employ this method to avoid cyberattacks and security breaches by legitimately hacking into systems and looking for flaws. CEH was designed to include a hands-on environment and a logical procedure across each ethical hacking area and technique. This is to provide you the opportunity to work towards proving the knowledge and skills to earn the CEH certificate and perform the tasks of an ethical hacker. Read more: https://www.infosectrain.com/blog/top-20-certified-ethical-hacker-interview-questions-and-answer/

CEH-brochure.pdf

kaouthermejri

Similar to Learn intrusion detection: Using Zeek and Elastic for incident response (20)

Get started in cybersecurity in 2022

How to do application security right

Getting started in digital forensics

Understanding Penetration Testing & its Benefits for Organization

2019 FRSecure CISSP Mentor Program: Class Ten

Intro to INFOSEC

edCeh brochure

Karthik raja r task 7 i

Ecsa LPT V8 brochure

Information Security Analyst- Infosec train

Certied Ethical Hacker

Activity1 c1

It security cognic_systems

FRSecure 2018 CISSP Mentor Program Session 10

All About Cyber Security Orientation Program (Foundational Level).pptx

Cloud Security Issues and Challenge.pptx

All About Cyber Security Orientation Program (Foundational Level).pptx

Ecsa Course

Top 20 certified ethical hacker interview questions and answer

CEH-brochure.pdf

More from Infosec

AWS Certified DevOps Engineer: What it is and how to get certified

Infosec

Watch the full webinar here: https://www.infosecinstitute.com/webinar/aws-certified-devops-engineer-what-it-is-and-how-to-get-certified/ Cloud infrastructure is the backbone of many organizations and services, and DevOps engineers are the professionals tasked with ensuring those systems are responsive, available, scalable and secure. The AWS Certified DevOps Engineer – Professional certification validates your skills in provisioning, operating and managing distributed AWS cloud systems. Join us on March 27 at 11 a.m. Central to learn how this AWS certification can benefit your career — and what to expect in the first-ever live AWS boot camps from Infosec. In less than 30 minutes, you’ll learn: - What’s on the AWS Certified DevOps Engineer exam (DOP-C02) - Career paths AWS certification holders - Ways you can train and get certified - Plus Q&A from live attendees

AWS Cloud Operations Administrator: What it is and how to get certified

Infosec

Watch the webinar here: https://www.infosecinstitute.com/webinar/aws-certified-sysops-administrator/ As the AWS cloud market continues to expand, professionals are needed to administer those systems. AWS Certified Cloud Operations Administrator training prepares you to earn your AWS Certified SysOps Administrator certification — and validates your skills in deploying, managing and operating AWS workloads. Join us to learn how this AWS certification can benefit your IT and cybersecurity career — and what to expect in the first-ever live AWS boot camps from Infosec. In less than 30 minutes, you’ll learn: - What’s on the AWS Certified Cloud Operations/SysOps Administrator exam (SOA-C02) - Career paths AWS certification holders - Ways you can train and get certified

AWS Certified Security - Specialty: What it is and how to get certified

Infosec

Watch the webinar: https://www.infosecinstitute.com/webinar/aws-certified-security---specialty-what-it-is-and-how-to-get-certified/ Cloud security skills are among the most in-demand in 2024, and if you work in the cloud, there’s a good chance it involves AWS. The AWS Certified Security - Specialty certification validates your skills in creating and implementing AWS cloud security solutions. Join us on March 13 at 11 a.m. Central to learn how this AWS certification can benefit your cybersecurity career — and what to expect in the first-ever live AWS boot camps from Infosec. In less than 30 minutes, you’ll learn: - What’s on the AWS Certified Security exam (SCS-C02) - Career paths AWS certification holders - Ways you can train and get certified - Plus Q&A from live attendees

AWS Certified Solutions Architect Webinar.pptx

Infosec

Watch the webinar here: https://www.infosecinstitute.com/webinar/aws-certified-solutions-architect-what-it-is-and-how-to-get-certified/ Amazon Web Services (AWS) is the market leader for cloud infrastructure, and the AWS Certified Solutions Architect – Associate certification validates your knowledge and skills in designing secure, resilient, high-performing and cost-optimized architectures. Join us to learn how this AWS certification can benefit your career — and what to expect in the first-ever live AWS boot camps from Infosec. In less than 30 minutes, you’ll learn: What’s on the AWS Certified Solutions Architect exam (SOA-C02) Career paths AWS certification holders Ways you can train and get certified This webcast is part of the Infosec AWS Training Series: https://www.infosecinstitute.com/resources/?q=aws&Type=Webcast+and+video

Infosec and AWS - A new way to train for your AWS certification (1).pptx

Infosec

Watch the webinar: https://www.infosecinstitute.com/webinar/infosec-and-aws-a-new-way-to-train-for-your-aws-certification/ Amazon Web Services (AWS) certifications are some of the most pursued in the IT and cybersecurity industry, by both employers and professionals. And now, there’s a new way to train for them with Infosec. Join us to learn about the new partnership between AWS and Infosec, making Infosec an authorized live boot camp training provider for AWS certifications. You’ll learn: - How AWS certification can boost your career - Which AWS certification is right for you - How the new AWS live boot camps will work - Plus Q&A from live attendees This webcast is part of the Infosec AWS Training Series: https://www.infosecinstitute.com/resources/?q=aws&Type=Webcast+and+video

How AI and ChatGPT are changing cybersecurity forever.pptx

Infosec

Watch the full webinar (and demo) here: https://www.infosecinstitute.com/webinar/how-chatgpt-and-ai-are-changing-cybersecurity-forever/ Artificial intelligence (AI) technologies are reshaping both how cybersecurity is done and how people learn cybersecurity. In this live demonstration, Infosec’s Keatron Evans will demonstrate how you can use ChatGPT to perform cybersecurity functions and teach yourself new skills — right now. Join us on February 23 at 11 a.m. Central to get a practical, hands-on approach around how to use AI for your cybersecurity needs. You’ll learn: - How malicious actors use AI tools like ChatGPT - Ways for cybersecurity professionals to get started with AI - How AI tools can help you learn quicker and better - Plus Q&A from live attendees

2023.06 - CompTIA Security+ Everything you need to know about the new exam .pptx

Infosec

Watch the webinar here: https://www.infosecinstitute.com/webinar/comptia-security-everything-you-need-to-know-about-the-sy0-701-update/ CompTIA’s Security+, the most popular cybersecurity certification in the world, is getting an overhaul! The updated exam (from SY0-601 to SY0-701) re-aligns the certification to match the most in-demand entry-level cybersecurity skills and trends heading into 2024. Join Patrick Lane, Director of Certification Product Management at CompTIA, to learn how the Security+ certification is evolving so it remains the “go-to” certification for anyone trying to break into cybersecurity. You’ll learn about: - Evolving Security+ domain areas and job skills - Common job roles for Security+ holders - SY0-601 and SY0-701 exam timelines - Tips to pass the updated Security+ exam - Plus Security+ questions from live viewers

NCSAM 2023 Webinar.pptx

Infosec

Learn how to roll out a successful Cybersecurity Awareness Month program that boosts employee engagement all October (and beyond). Join Infosec’s Emma Waite and Camille Raymond to learn: - What employee-related risk data is needed to quantify success - How to communicate your NCSAM plans to stakeholders - The content and cadence appropriate to drive engagement - Creative ways organizations are celebrating NCSAM - How to continue the momentum after October

CompTIA CySA+ certification (CS0-003) changes: Everything you need to know

Infosec

Watch the webinar here: https://www.infosecinstitute.com/webinar/comptia-cysa-certification-changes-everything-you-need-to-know/ Information security analyst is one of the fastest-growing job categories in the U.S., with 35 percent overall growth expected by 2031. CompTIA’s Cybersecurity Analyst+ (CySA+) is one of the most popular certifications related to the role — and it’s getting an update in 2023 to align with the most in-demand knowledge and skills requested by employers. Join Patrick Lane, Director of Certification Product Management at CompTIA, to learn everything you need to know about the latest CySA+ certification and exam (CS0-003) updates, including: - Evolving security analyst job skills - Common job roles for CySA+ holders - What’s changed from CS0-002 to CS0-003 - Tips to pass the updated CySA+ exam - Plus CySA+ questions from live viewers

Skills training value: How to differentiate your staff and your organization ...

Infosec

Watch the full webinar here: https://event.on24.com/wcc/r/4125122/E0E3F3F43BABD48134E3909C4577F5EA Hiring skilled people is hard. Once you get them, you want to retain them — and increase their value to your customers. Save your spot to learn more about: - Challenges with getting and retaining internal talent - How better skillsets affect margin/profitability - Using Infosec Skills to attract highest-quality hires - Using Infosec Skills to upskill your internal team - Reselling Infosec Skills to your end-user

Learning ≠ Education: How people really learn and what it means for security ...

Infosec

Emotion and passion are the two most essential elements in understanding how people learn. Often, the initial response to security threats is throwing technology at the problem. But as we know, you can’t fix all of your security issues without understanding the role humans play in the process. Join Nick Shackleton-Jones — 30-year learning and development vet, Former CLO at Deloitte UK and CEO and Founder of Shackleton Consulting — to better understand: - The difference between learning and education - What really drives how employees learn - How to develop a growth mindset that truly changes employee behavior Watch the full webcast here: https://www.infosecinstitute.com/webinar/adult-learning-security/

Security awareness training - 4 topics that matter most

Infosec

National Cybersecurity Awareness Month (NCSAM) is right around the corner. Now’s the time to level up your security awareness training program — and instill best practices in employees that will help keep them (and your organization) secure year-round. Join us to learn about the four key employee behaviors for NCSAM 2022. All registrants will receive a free Cybersecurity Awareness Month Toolkit, which includes: 1 training module & assessment 5 posters & infographics 1 employee presentation 4 email templates And more

A public discussion about privacy careers: Training, certification and experi...

Infosec

The word privacy can have so many meanings. Whether personal, professional or procedural, privacy can be a state of being, an action that requires compliance or a created space of safety. Join Infosec Skills authors Chris Stevens, John Bandler and Ralph O’Brien as they discuss the intersection of privacy and cybersecurity. They’ll help you walk a path that will lead to an engaging career as a privacy specialist — a job role that grows with more opportunities year after year! The panel will discuss: Privacy as it relates to cybersecurity Privacy certifications that align with your career path Best practices for studying for IAPP certification exams Tips for getting experience in the field of privacy Interviewing for the privacy position you’ve been searching for Plus your live questions on privacy as a career

CompTIA PenTest+: Everything you need to know about the exam

Infosec

CompTIA network+ | Everything you need to know about the new exam

Infosec

Isaca career paths - the highest paying certifications in the industry

Infosec

CMMC case study: Inside a CMMC assessment

Infosec

CMMC rollout: How CMMC will impact your organization

Infosec

Solar winds supply chain breach - Insights from the trenches

Infosec

On December 13 2020, the Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive to immediately “disconnect or power down SolarWinds Orion products” as they were being actively exploited by malicious actors. Infosec Skills author and KM Cyber Security managing partner Keatron Evans is helping numerous clients respond to the breach and mitigate any potential damage. Join him as he discusses: -What we know about the breach so far -How his clients have responded to the incident -What to look for in your environment to see if you’ve been affected

From machine learning to deepfakes - how AI is revolutionizing cybersecurity

Infosec

Artificial intelligence (AI) and machine learning are changing how cybercriminals carry out cyberattacks — and how cybersecurity professionals defend against them. Join Infosec Skills author Emmanuel Tsukerman to get an inside look at these new technologies, their impact on cybersecurity and what it means for your career, including: -Different attack methods that leverage machine learning -Current and future uses of machine learning and AI within cybersecurity -New skills and roles for cybersecurity professionals -A live deepfake demonstration

More from Infosec (20)

AWS Certified DevOps Engineer: What it is and how to get certified

AWS Cloud Operations Administrator: What it is and how to get certified

AWS Certified Security - Specialty: What it is and how to get certified

AWS Certified Solutions Architect Webinar.pptx

Infosec and AWS - A new way to train for your AWS certification (1).pptx

How AI and ChatGPT are changing cybersecurity forever.pptx

2023.06 - CompTIA Security+ Everything you need to know about the new exam .pptx

NCSAM 2023 Webinar.pptx

CompTIA CySA+ certification (CS0-003) changes: Everything you need to know

Skills training value: How to differentiate your staff and your organization ...

Learning ≠ Education: How people really learn and what it means for security ...

Security awareness training - 4 topics that matter most

A public discussion about privacy careers: Training, certification and experi...

CompTIA PenTest+: Everything you need to know about the exam

CompTIA network+ | Everything you need to know about the new exam

Isaca career paths - the highest paying certifications in the industry

CMMC case study: Inside a CMMC assessment

CMMC rollout: How CMMC will impact your organization

Solar winds supply chain breach - Insights from the trenches

From machine learning to deepfakes - how AI is revolutionizing cybersecurity

Recently uploaded

Designing Great Products: The Power of Design and Leadership by Chief Designe...

Product School

JMeter webinar - integration with InfluxDB and Grafana

RTTS

Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application. In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics. Length: 30 minutes Session Overview ------------------------------------------- During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana: - What out-of-the-box solutions are available for real-time monitoring JMeter tests? - What are the benefits of integrating InfluxDB and Grafana into the load testing stack? - Which features are provided by Grafana? - Demonstration of InfluxDB and Grafana using a practice web application To view the webinar recording, go to: https://www.rttsweb.com/jmeter-integration-webinar

Mission to Decommission: Importance of Decommissioning Products to Increase E...

Product School

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

PCI PIN Basics Webinar from the Controlcase Team

ControlCase

Neuro-symbolic is not enough, we need neuro-*semantic*

Frank van Harmelen

Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”. All of this illustrated with link prediction over knowledge graphs, but the argument is general.

GraphRAG is All You need? LLM & Knowledge Graph

Guy Korland

Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs. 1. Unifying Large Language Models and Knowledge Graphs: A Roadmap. https://arxiv.org/abs/2306.08302 2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs: https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/

Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...

Product School

Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...

Thierry Lestable

Bits & Pixels using AI for Good.........

Alison B. Lowndes

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...

Product School

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

Ramesh Iyer

In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.

Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality

Inflectra

In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring. Learn about: • The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks. • Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective. • Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification. • Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process. Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.

Generating a custom Ruby SDK for your web service or Rails API using Smithy

g2nightmarescribd

Have you ever wanted a Ruby client API to communicate with your web service? Smithy is a protocol-agnostic language for defining services and SDKs. Smithy Ruby is an implementation of Smithy that generates a Ruby SDK using a Smithy model. In this talk, we will explore Smithy and Smithy Ruby to learn how to generate custom feature-rich SDKs that can communicate with any web service, such as a Rails JSON API.

Connector Corner: Automate dynamic content and events by pushing a button

DianaGray10

Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to: Create a campaign using Mailchimp with merge tags/fields Send an interactive Slack channel message (using buttons) Have the message received by managers and peers along with a test email for review But there’s more: In a second workflow supporting the same use case, you’ll see: Your campaign sent to target colleagues for approval If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team But—if the “Reject” button is pushed, colleagues will be alerted via Slack message Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors. And... Speakers: Akshay Agnihotri, Product Manager Charlie Greenberg, Host

Key Trends Shaping the Future of Infrastructure.pdf

Cheryl Hung

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Paul Groth

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Recently uploaded (20)

Designing Great Products: The Power of Design and Leadership by Chief Designe...

JMeter webinar - integration with InfluxDB and Grafana

Mission to Decommission: Importance of Decommissioning Products to Increase E...

FIDO Alliance Osaka Seminar: Overview.pdf

PCI PIN Basics Webinar from the Controlcase Team

Neuro-symbolic is not enough, we need neuro-*semantic*

GraphRAG is All You need? LLM & Knowledge Graph

Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...

Empowering NextGen Mobility via Large Action Model Infrastructure (LAMI): pav...

Bits & Pixels using AI for Good.........

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

From Siloed Products to Connected Ecosystem: Building a Sustainable and Scala...

Securing your Kubernetes cluster_ a step-by-step guide to success !

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality

Generating a custom Ruby SDK for your web service or Rails API using Smithy

Connector Corner: Automate dynamic content and events by pushing a button

Key Trends Shaping the Future of Infrastructure.pdf

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

DevOps and Testing slides at DASA Connect

Learn intrusion detection: Using Zeek and Elastic for incident response

2. Meet the panel Infosec Skills author & Founder of Enigma Networkz Jeff Peters Director of Content Marketing Infosec Mark Viglione

3. Today’s webcast ⮚ Intrusion detection overview ⮚ MITRE ATT&CK and intrusion detection ⮚ Intrusion detection demo ⮚ Use case ⮚ Tools ⮚ Zeek demo ⮚ Elastic demo ⮚ Q&A

4. More cybersecurity training resources Learn intrusion detection with Mark Viglione ⮚ Advanced Intrusion Detection learning path ⮚ Read Mark’s intrusion detection blogs Free resources from Infosec ⮚ Create your free Infosec Skills account ⮚ Infosec Skills Monthly Challenge ⮚ Infosec YouTube channel ⮚ Infosec Accelerate Scholarship

5. Intrusion detection overview Intrusion detection is a way to detect if any unauthorized activity is occurring on your network or any of your endpoints/systems. Jobs that require IDS knowledge and skills: ⮚ SOC analyst ⮚ Cybersecurity analyst ⮚ Cyber threat hunter ⮚ Network security engineer ⮚ Systems engineer ⮚ Penetration tester

6. Intrusion detection overview: 3 types Signature-based detection involves detecting previously known vulnerabilities and attacks Rule-based detection uses a set of rules to determine whether an activity is suspicious Anomaly detection uses methods like machine learning to detect previously unknown threats

7. MITRE ATT&K and intrusion detection

8. Intrusion detection demo: Use case and tools Intrusion detection example ⮚ Generating Zeek logs from Brim ⮚ Uploading to Elastic, an open- source security information and event management (SIEM) tool ⮚ Exploring the data, walking through a dashboard and setting up detections Demo

9. Intrusion detection: What’s next? Visibility is crucial for blue teams and network defenders. You set up the rule. Now what? ⮚ Tuning: Huge part of building valuable detections ⮚ Alert fatigue: Prioritizing alerts/detections ⮚ Choice of tools: Many different tools, how to choose?

10. Questions?

11. 15 scholarships. 5 categories. $225,000+ value.

12. Learn cybersecurity with Infosec Skills Infosec Skills subscription: ➢ 190+ role-based learning paths (e.g., Ethical Hacking, Digital Forensics, Advanced Intrusion Detection) ➢ 100s of hands-on labs in cloud-hosted cyber ranges ➢ Custom certification practice exams and skill assessments aligned to key cybersecurity roles Infosec Skills live boot camp: ➢ Live, instructor-led training (in-person or live online) ➢ Free annual Infosec Skills subscription ➢ 1-year extended access to all boot camp video replays and materials ➢ Exam voucher and Exam Pass Guarantee infosecinstitute.com/skills

13. Free year of Infosec Skills And the winner for a one-year subscription to Infosec Skills is … infosecinstitute.com/skills (Valued at $599)

14. About us Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. www.infosecinstitute.com

Learn intrusion detection: Using Zeek and Elastic for incident response

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Learn intrusion detection: Using Zeek and Elastic for incident response

Similar to Learn intrusion detection: Using Zeek and Elastic for incident response (20)

More from Infosec

More from Infosec (20)

Recently uploaded

Recently uploaded (20)

Learn intrusion detection: Using Zeek and Elastic for incident response